Add coverage tests for issueOrRenew() renewal path and savePrivateKey() invalid PEM

Author: bashgeek

tests/Unit/CoyoteCertTest.php

@@ -193,6 +193,13 @@ public function cleanup(string $d, string $tok): void {}
     expect($result->certificate)->toBe('cert-pem');
 });
 
+it('issueOrRenew() calls issue() when renewal is needed', function () {
+    // needsRenewal() returns true (no storage) → line 380 `return $this->issue()` is hit
+    // → issue() throws at the "No domains" guard
+    expect(fn () => makeCoyote()->challenge(makeNoOpHandler())->issueOrRenew())
+        ->toThrow(AcmeException::class, 'No domains');
+});
+
 // ── renew() alias ─────────────────────────────────────────────────────────────
 
 it('renew() is an alias for issue() and throws when no domains are configured', function () {

tests/Unit/Support/LocalFileAccountTest.php

@@ -124,6 +124,13 @@
     }
 });
 
+it('savePrivateKey() throws CryptoException when the PEM is not a valid private key', function () {
+    $this->account->generateNewKeys(); // ensure directory exists
+
+    expect(fn () => $this->account->savePrivateKey('not-a-pem', KeyType::RSA_2048))
+        ->toThrow(\CoyoteCert\Exceptions\CryptoException::class, 'Cannot load private key');
+});
+
 it('getKey() throws StorageException when file exists but cannot be read (mode 0000)', function () {
     $this->account->generateNewKeys();